GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
45c510703590b83a25319a075a3405ce_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45c510703590b83a25319a075a3405ce_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45c510703590b83a25319a075a3405ce_JaffaCakes118
Size
48KB
MD5
45c510703590b83a25319a075a3405ce
SHA1
914cf86db0f92b29a948418d71cbb3dff1be3325
SHA256
c5b8c934bbce8fa1d6fbc77284f48c9c61c25f5f10cd07f0714958b92d3d1afe
SHA512
cb6191cd966d3095b5c4de915c4fabdf9d9299888382033e74c91471cd9189309048d5128533205e8baab5cd515098cc290f07e416fa751a2f3fd5a156482b27
SSDEEP
384:6PE9ThfX3Nj7Vg8dnhqsNtaeG4CJuVqMH2NbQT42Nj+sjdWsfXuBGNup/KwLKxjU:+6TVXZxqsFr7TUSDMywLKxjIOPfK
Checks for missing Authenticode signature.
resource |
---|
45c510703590b83a25319a075a3405ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
OutputDebugStringA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
DeleteFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
CreateThread
Sleep
CreateFileMappingA
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
InterlockedExchange
GetProcessHeap
HeapFree
PeekMessageA
GetWindowLongA
GetWindowTextA
TranslateMessage
FindWindowExA
GetKeyState
GetFocus
DispatchMessageA
GetWindowThreadProcessId
GetForegroundWindow
SetWindowsHookExA
SetRect
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
GetDC
GetDIBits
DeleteObject
BitBlt
GetDeviceCaps
GetObjectA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
_strlwr
localtime
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
printf
strncmp
fseek
memcmp
fopen
strstr
strcpy
memset
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
??2@YAPAXI@Z
memmove
abs
__CxxFrameHandler
strftime
_memicmp
memcpy
strcmp
strlen
strcat
vsprintf
strncpy
wcslen
strrchr
fflush
fwrite
fclose
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ